Description (CNA)
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco License On-Prem | affected 7-202001; affected 1.1; affected 6.3.0; affected 8-202004; affected 8-202006; affected 1.2; affected 1.3; affected 8-202012; affected 8-202010; affected 8-202008; affected 9-202201; affected 8-202102; affected 1.4; affected 8-202105; affected 8-202108; affected 8-202112; affected 8-202201; affected 8-202206; affected 8-202212; affected 8-202302; affected 8-202303; affected 8-202304; affected 8-202308; affected 8-202401; affected 8-202404; affected 9-202406; affected 9-202407; affected 9-202410; affected 9-202412; affected 9-202501; affected 9-202502; affected 9-202504; affected 9-202507; affected 9-202510; affected 9-202601; affected 10-202606 |
CWE
CWE-23
References
ADP enrichment
No English description supplied.
No references supplied.